To implement an electronic signature scheme that is highly secure and highly efficient.

Provided is an information processing device configured to: generate N sets of messages based upon a tuple F=(f1, ..., fm) of high-order multivariate polynomials defined on a ring K, and upon a vector s (s of Kn); input a document M and the N sets of messages to a one-way function; select N pieces of first information; generate N pieces of second information corresponding respectively to the N pieces of first information; and provide an electronic signature consisting of the N pieces of first information and the N pieces of second information to a verifier who holds the tuple F of high-order multivariate polynomials and a vector y=(y1, ..., ym)=(f1(s), ..., fm(s)). The vector s is a signing key, the tuple F of high-order multivariate polynomials and the vector y are a public key, and the messages are information obtained by using the public key and the second information to perform a prescribed computation selected in accordance with the type of the first information corresponding to said second information.